Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of tevans.uk@googlemail.com
 designates 209.85.215.52 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAMQP8vvO40RuXcdgpa4VtNmcKekjdVDrXk0SnWvKmcyn=Vc7=g@mail.gmail.com>
References: 
 <CAMQP8vvO40RuXcdgpa4VtNmcKekjdVDrXk0SnWvKmcyn=Vc7=g@mail.gmail.com>
Date: Sat, 13 Apr 2013 01:19:04 +0100
Message-ID: 
 <CAFHbX1+hROSASG7Z_ASsBz2aiGV45xY3HzeN2WA+DNpcHcF6GA@mail.gmail.com>
From: Tom Evans <tevans.uk@googlemail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=UTF-8
Subject: Re: [users@httpd] Strange Apache logs - very slow loading time

On Sat, Apr 13, 2013 at 1:12 AM, Karol Pomaski <karol.pomaski@gmail.com> wrote:
> Hi All,
>
> I need a help. I believe something is wrong. I have recently found a strange
> information on my apache error.log:
>
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> root@ip-10-145-204-53:~# tail /var/www/shops/88/logs/error.log
> [Sat Apr 13 00:08:28 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:28 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:28 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:29 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:30 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:30 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:31 2013] [error] [client 69.171.247.29] SSL Proxy
> requested for ecom01088.stores-on.com:80 but not enabled [Hint:
> SSLProxyEngine]
> [Sat Apr 13 00:08:31 2013] [error] proxy: HTTPS: failed to enable ssl
> support for 69.171.247.29:443 (www.facebook.com)
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
> [Sat Apr 13 00:08:32 2013] [error] (110)Connection timed out: proxy: HTTP:
> attempt to connect to 107.6.106.10:80 (*) failed
>
> And every second the errors are appearing. Is this some kind of DDos attack?
> Or the apache is misconfigured?
> How can I get rid of this problem?
>
> Thank you very much for any help on this. This is a high priority issue.
>
> Regards,
> Karol
>

Er, check your access log very quickly. It looks like you are running
a forward proxy that people are using to access the web.

Make sure you keep the logs, if they were up to anything malicious,
you will need them to show the police that it wasn't you.

If you weren't intending on running a forward proxy, add
"ProxyRequests off" *immediately* and restart.

Cheers

Tom

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org